CVE-2024-5461
Last modified
CVE-2024-5461 is a high-severity vulnerability rated 8/10 on the CVSS scale. Implementation of the Simple Network Management Protocol (SNMP) operating on the Brocade 6547 (FC5022) embedded switch blade, makes internal script calls to system.sh from within the SNMP binary. An authenticated attacker could perform command or parameter injection on SNMP operations that are only enabled on the Brocade 6547 (FC5022) embedded switch. EPSS estimates a 0.42% chance of exploitation in the next 30 days.
Description
Implementation of the Simple Network Management Protocol (SNMP) operating on the Brocade 6547 (FC5022) embedded switch blade, makes internal script calls to system.sh from within the SNMP binary. An authenticated attacker could perform command or parameter injection on SNMP operations that are only enabled on the Brocade 6547 (FC5022) embedded switch. This injection could allow the authenticated attacker to issue commands as Root.
Metrics
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | Fabric Operating System | < 8.2.3e1 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-5461?
How severe is CVE-2024-5461?
How do I fix CVE-2024-5461?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-54565The issue was addressed with improved checks. This issue is …6.2
- CVE-2024-54568The issue was addressed with improved memory handling. This …4.3
- CVE-2024-5457The Panda Video plugin for WordPress is vulnerable to Stored…5.4
- CVE-2024-5458In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.…5.3
- CVE-2024-5459The Restaurant Menu and Food Ordering plugin for WordPress i…4.3
- CVE-2024-5460A vulnerability in the default configuration of the Simple N…8.1
- CVE-2024-5462If Brocade Fabric OS before Fabric OS 9.2.0 configuration se…7.5
- CVE-2024-5463A vulnerability regarding buffer copy without checking the s…6.5
- CVE-2024-5464Vulnerability of insufficient permission verification in the…3.3
- CVE-2024-5465Function vulnerabilities in the Calendar module Impact: Succ…5.5
- CVE-2024-54658The issue was addressed with improved memory handling. This …6.5
- CVE-2024-5466Zohocorp ManageEngine OpManager and Remote Monitoring and Ma…8.8
Are you affected by CVE-2024-5461?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST